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ABSTRACT 



An electronic data processing circuit includes an operating 
module such as a microprocessor, at least one data memory 
and a data bus extending between the data memory and the 
operating module. In order to provide an electronic data 
processing circuit which is better protected against undes- 
ired alterations, at least one encoding module is provided in 
the region between the data memory and the data bus and/or 
in the region between the operating module and the data bus. 
The encoding module is constructed in such a way that data 
traffic between the operating module and the data bus or 
between the data memory and the data bus can be encoded 
and/or decoded. 
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ELECTRONIC DATA PROCESSING CIRCUIT 

CROSS-REFERENCE TO RELATED 
APPLICATION 

This application is a continuation of copending Interna- 5 
tional application No. PCT/DE97/02070, filed Sep. 15, 
1997, which designated the United States. 

BACKGROUND OF THE INVENTION 

10 

FIELD OF THE INVENTION 

The invention relates to an electronic data processing 
circuit having an operating module such as, for example, a 
microprocessor, at least one data memory and a data bus is 
extending between the data memory and the operating 
module. 

Electronic data processing circuits of the generic type are 
frequently used in applications which are critical with regard 
to security. In such a case, confidential data, money values 20 
and access authorizations which are processed by the oper- 
ating module, for example upon an external request, are 
stored in the data memory. 

Since the memory contains information which is not to be . 
accessed as far as possible, it is necessary to take security 25 
measures against manipulations of the electronic data pro- 
cessing circuit. 

When an electronic data processing circuit of the generic 
type is constructed as an integrated circuit, it can be covered 3Q 
with different passivation layers. In that case, the passivation 
layers can be, applied in such a way that removing a 
passivation layer entails the destruction of the data memory. 
Furthermore, the data memory can be buried in deeper lying 
layers of the integrated circuit, thus rendering access to it 35 
more difficult. 

A further possibility for protecting an electronic data 
processing circuit against undesired manipulations is using 
sensors which sample operating conditions of the electronic 
data processing circuit. As soon as a value sampled by a 40 
sensor is outside a normal value, appropriate security mea- 
sures are initiated which lead to deactivation of the elec- 
tronic data processing circuit or else to an erasure of the data 
memory. 

Furthermore, there are also software sensors which moni- 45 
tor the operation of the operating module for forbidden 
commands or for instances of access to address areas which 
are blocked for normal operation. Moreover, the access 
sequence can be monitored for its correctness. 

Finally, it is further known for instances of access by the 50 
operating module to the data memory which are permitted in . 
a special production mode to be limited by special hardware 
devices such as, for example, interruptably configured con- 
necting tracks. 

Despite the security measures set forth above, undesired 55 
manipulations occasionally occur on the electronic data 
processing circuits of the generic type. 

SUMMARY OF THE INVENTION 

60 

It is accordingly an object of the invention to provide an 
electronic data processing circuit, which overcomes the 
hereinafore-mentioned disadvantages of the heretofore- 
known devices of this general type and which is better 
protected against undesired alterations. 65 

It is accordingly an object of the invention to provide an 
electronic data processing circuit, comprising an operating 
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module, such as a microprocessor; at least one data memory; 
a data bus having at least one data line connected between 
the at least one data memory and the operating module; and 
at least two encoding modules disposed in the vicinity of the 
at least one data line, the encoding modules cooperating to 
provide a complete encoding or decoding. 

The invention is based on the finding, which is essential 
to the invention, that new technical methods have made it 
easier to precisely manipulate electronic data processing 
circuits that are constructed as integrated circuits. Thus, 
from the point of view of a manipulator, an electronic data 
processing circuit in an integrated circuit is no longer to be 
regarded in its totality only as a chip, but as a system which 
is formed of individual components on a silicon substrate 
and the components of which can be accessed separately. 

It is therefore possible to draw conclusions about the 
information stored in the data memory by observing the data 
traffic on the data bus or by reading out the data memory, and 
that facilitates manipulation. 

In accordance with a further finding, which is essential to 
the invention, many manipulations on the electronic data 
processing circuits of the generic type are to be ascribed to 
the fact that success has been achieved in "tapping" the data 
traffic on the data bus, with the result that the program flow 
in the operating module can be observed and understood in 
an undesirable manner. 

In accordance with the invention, it is proposed to trans- 
port the data encoded in the electronic data processing 
circuit, so that devices are provided between the data bus 
and data memory or the operating module and data bus in 
order to encode and to decode the data traffic transported on 
the data bus. The devices of that type are denoted below as 
"encoding modules", and that denotation is specifically not 
limited to devices which execute only encoding. In accor- 
dance with the basic concept of the invention, this denota- 
tion also covers devices which execute both encoding and 
decoding or only one of the two operations. 

The configuration of the electronic data processing circuit 
according to the invention ensures that even in the case of 
successful tracking of the data traffic on the data bus it is not 
possible to draw direct conclusions regarding the data stored 
in the data memory. Furthermore, it is not possible to 
directly draw conclusions on the program flow from the 
information obtained when tracking the data traffic on the 
data bus. Specifically, even where data stored in the data 
memory are successfully read out, it is not possible to draw 
direct conclusions regarding their meaning, since they make 
no sense to an unschooled observer. 

In accordance with the invention, it is particularly advan- 
tageous in this case that encoding and decoding be per- 
formed in a manner distributed or dislocated over the emire 
chip, because successful manipulation would require simul- 
taneous observation of a plurality of locations of the elec- 
tronic data processing circuit, and that can only be done with 
difficulty from a technical point of view. 

It is important in the case of electronic data processing 
circuits provided with a latch butter for buffering instances 
of access to the data memory that the encoding module be 
disposed in such a way that the content of the latch buffer is 
always encoded. Specifically, the content of the latch can be 
observed relatively easily, in such a way that during opera- 
tion of the data processing circuit according to the invention 
it must be present in an encoded manner for the sake of 
security. 

In accordance with the invention, the encoding and 
decoding can extend as far as into a CPU of a data process- 
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ing circuit according to the invention. However, encoding 
and decoding can also be performed independently of one 
another in a plurality of encoding modules. In accordance 
with the invention, however, solutions are also covered in 
which only a single encoding module is provided. 5 

Finally, there is a further advantage in data processing 
circuits which simultaneously process different applications 
in multitasking processing. Then, different applications or 
tasks can be assigned different data memories by suitable 
encoding, with' a different key being agreed for each task. As 10 
a result, one task cannot access data of the other task. 

It may therefore be stated in summary that in accordance 
with the invention it is now no longer sufficient to only 
examine the data processing circuit physically. In addition, 
it is now necessary, in particular, in conjunction with observ- 1 5 
ing a plurality of components, to also detect the key stored 
in the encoding module or in the encoding modules and, if 
appropriate, the activation of this key. 

In accordance with another feature of the invention, the 
encoding module is constructed in such a way that data 20 
traffic on the data bus can be encoded through the use of an 
encoding algorithm. An encoding module constructed in 
such a way has the advantage that it can be produced in a 
particularly cost-effective manner by mass production. 
However, encoding through the use of an algorithm takes a 25 
very long time, since it requires extensive calculations in the 
operating module. Real-time operation of this data process- 
ing circuit according to the invention is therefore not cur- 
rently possible. 3q 

In accordance with a further feature of the invention, the 
encoding module is constructed in such a way that data 
traffic on the data bus can be encoded through the use of 
hardware encoding. It is precisely in the case of hardware 
encoding that it is already very easy to realize operation of 35 
the data processing circuits according to the invention in real 
time, specifically both when the data memory is being 
accessed for reading and when it is being accessed for 
writing. 

In accordance with an added feature of the invention, the 40 
hardware encoding can be performed through the use of an 
encoding module which is constructed in such a way that the 
significance of individual bits of the data traffic can be 
changed selectively. Bits which, for example, are stored in 
the memory as "LOW" then appear in data traffic on the data 45 
bus as "HIGH". In accordance with an additional feature of 
the invention, this can be performed, for example, through 
the use of an encoding module which has at least one EXOR 
element. 

In accordance with yet another feature of the invention, 50 
the encoding module can be constructed in such a way that 
the connecting sequence of the data lines of the data bus can 
be changed selectively. This is seen on the outside as if 
individual bit lines of the data bus were interchanged. 

In accordance with yet a further feature of the invention, 55 
the hardware encoding can also be executed by an encoding 
module which is constructed in such a way that the data 
traffic between the data bus and the operating module and/or 
between the data bus and the data memory can be delayed 
selectively, at least partially. As a result, data traffic is eo 
simulated on the data bus which bears no relation to the 
instantaneous operating state of the electronic data process- 
ing circuit according to the invention. 

An essential feature of the data processing circuit accord- 
ing to the invention in this case is that the encoding module 65 
is constructed in such a way that the encoding operates 
selectively. This not only signifies that encoding can option- 
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ally be performed or not. In addition, in accordance with the 
invention this also covers the possibility of switching 
between different keys for encoding the data traffic. In this 
case, the use of the encoding module according to the 
invention assumes a dynamic behavior. 

It is envisaged precisely in the case of the data processing 
circuit according to the invention and having changing keys 
that data processing circuits of a batch are respectively 
provided with different and individual keys. This ensures 
that even should the key of one data processing circuit be 
known it is still not possible to draw conclusions regarding 
the keys of other data processing circuits. 

In accordance with yet an added feature of the invention, 
the encoding module has at least one input for inputting at 
least one key. However, this input into the encoding module 
can also be used for the purpose of switching over between 
specific keys stored in the encoding module itself, and even 
between the encoding methods applied in the encoding 
module. It is also possible in an entirely simple way to 
activate or deactivate a single encoding method. 

In a departure therefrom, it is also possible to input a key 
stored outside the encoding module through the input. In 
accordance with yet an additional feature of the invention, 
for this purpose, the key is advantageously stored in a 
FLASH cell or in an EEPROM cell. The cells mentioned are 
regarded as relatively safe, because the information is stored 
on a floating gate with only "a few" electrons. Most attempts 
to readout their content destroy the stored information. 
Consequently, in accordance with this embodiment of the 
invention there is a particularly secure encoding of the data 
traffic. Furthermore, all of the FLASH cells have the advan- 
tage of being programmable. Thus, when supplying the data 
processing circuit according to the invention it is possible in 
a simple way to program individual keys into each circuit 
and block them for further alterations. 

In accordance with again another feature of the invention, 
a further improvement in security results when the key is 
stored in a buried structure of an integrated module, and the 
integrated module is advantageously also accommodating 
the data processing circuit. Buried structures offer the advan- 
tage that they can be executed decentrally at different 
locations in the integrated module. This increases the secu- 
rity substantially, since it is very difficult for different 
locations in a data processing circuit accommodated in an 
integrated module to be observed simultaneously. 

In accordance with again a further feature of the 
invention, there are provided sensors which sample manipu- 
lations of the location at which the key is stored, and 
deactivate or otherwise render useless the data processing 
circuit according to the invention. 

In accordance with again an added feature of the 
invention, as an alternative to the keys stored during pro- 
duction of the data processing circuit according to the 
invention, it is also possible to provide a random number 
generator through the use of which a key can be selected 
randomly. 

In accordance with again an additional feature of the 
invention, the selection of the key used in the encoding 
module is carried out by the operating module, particularly 
during the program flow. For this purpose, the data process- 
ing circuit in accordance with the invention is constructed in 
such a way that a key can be input into the encoding module 
during execution of predetermined operations by the oper- 
ating module. Since the program code of the operating 
module can possibly be known, the process of selecting the 
key is advantageously hidden in the normal program code. 
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Thus, the operating module could be constructed, for key, to communicate, for example with a defined number of 

example, in such a way that in the case of executing a encoding units, only in the case of the connecting paths of 

harmless command such as, for example, Clr C ("CLEAR the data bus which are provided for that purpose. All other ' 

CARRY") the key of the encoding module or encoding connections with non-suitable encodings cannot function 

modules is changed. 5 correctly. 

In accordance with still another feature of the invention, Other features which are considered as characteristic for 

there is provided a time-measuring device which monitors a the invention are set forth in the appended claims, 

change of key and initiates such a change when the key is not Although the invention is illustrated and described herein 

changed often enough. as embodied in an electronic data processing circuit, it is 

In accordance with still a further feature of the invention, 10 nevertheless not intended to be limited to the details shown, 

with regard to the keys being used in the encoding modules, since various modifications and structural changes may be 

it is provided that the keys are generated by the operating made therein without departing from the spirit of the inven- 

module or the CPU. This is performed, for example, by tion and within the scope and range of equivalents of the 

deriving a key through the use of a conversion method from claims. 

an address generated by the CPU. The advantage of this ]5 xhe construction and method of operation of the 

method is that the key is changed continuously, that is to say inve ntion, however, together with additional objects and 

with each address. advantages thereof will be best understood from the follow- 

The programmer of the operating module can influence mg description of specific embodiments when read in con- 

the encoding by selecting different conversion methods. It nection with the accompanying drawings, 
may be stated in summary that the data traffic in the data 

processing circuit according to the invention can be under- BRIEF DESCRIPTION OF THE DRAWINGS 

stood by a manipulator only if the key which is respectively ™„ L i , . . A j. 

j • j- j i • i rpi j * * j ■ *u FIG. 1 is a block circuit diagram of an electronic data- 
used in the encodmg module is known. The data stored m the ... ,. ? . ■ 
data memory can also be understood only with knowledge of Pressing circuit according to the invention having only a 

the key belonging to the data memory Tnis substantially 25 sm S le cncodu « device in a CPU; 

increases security against manipulations. mG - 2 is a block circuit diagram of a variant of the 

nf „ „„„,„ m „ Q , „,u rt ,v ™.„„,„ mm ;„„ tu„ electronic data processing circuit of FIG. 1; and 

Or course, a programmer who is programming the oper- .... 

ating module of the data processing circuit must keep a FIG - 3 is a block circuit diagram of a further electronic 

confidential list of which data belonging to the key he or she 3Q data processing circuit according to the invention, having 

has stored in which addresses of the data memory or of the encoding devices in the CPU and in a region of data 

data processing circuit. Depending on the type of key, the memories. 

programmer can also provide certain pre-conditions to be 

fulfilled which are expressed, for example, in such a way 

that it is always necessary to read pairs of values. 35 

It is a particularly advantageous feature of the electronic Referring now to the figures of the drawings in detail and 

data processing circuit that at least two encoding modules first, particularly, to FIG. 1 thereof, there is seen a data 

are provided in the region of at least one data line of the data processing circuit according to the invention, which has a 

bus which connects the operating module and at least one CPU 101 as an operating module and a plurality of data 

data memory. The encoding modules are constructed in such 40 memories. In detail, these data memories are a ROM 102, an 

a way that complete encoding or decoding cannot be EEPROM 103, a FLASH memory 104, and a RAM 105. The 

executed other than by the cooperation of the two encoding data memories 102, 103, 104, 105 and the CPU 101 are 

modules. connected to one another through a data bus 106. 

In accordance with a concomitant feature of the invention, An encoding module 107 which is provided in the CPU 

the two encoding modules are disposed at different locations 45 101 encodes or decodes data traffic between the CPU 101 

in the electronic data processing circuit. This embodiment and the data memories 102, 103, 104 and 105. It may be 

ensures that encoding of the data traffic is performed at two mentioned in this case once again that such a device is 

different locations. A typical manipulator will possibly per- referred to below as an "encoding module", although it is 

form only one encoding at a single location, specifically in expressly not limited to a device which only executes 

the case of a single encoding module, and nevertheless not 50 encoding. In accordance with the basic concept of the 

arrive at a useful result when employing the encoding. invention, this designation also covers a device which 

Precisely in the case of an embodiment having two encoding executes both encoding and decoding or only one of these 

modules, which are accommodated at different locations, it two operations. The encoding or decoding can be performed 

is specifically particularly difficult to perform an encoding, in this case by a suitable delay, by interchanging individual 

since two different locations of a microstructure can only be 55 bit lines of the data bus, or by altering the significance of 

observed simultaneously in a particularly difficult way. The individual data bits. It is also possible to execute software 

encoding modules which are thus constructed can, for encoding. 

example, be constructed in such a way that one encoding Furthermore, the data processing circuit according to the 
module encodes or decodes the lower four bits of a data bus invention has a multiplexer 108, which is connected to the 
at one location, while the other encoding module encodes or 60 FLASH memory 104 through a data line 109. The multi- 
decodes the remaining bits of the data bus. plexer 108 is connected through a data line 110 to a timer 111 
A further advantage of the method according to the which can be fed a random number by a random number 
invention results in the case of those data processing circuits generator 113 through a data line 112. The multiplexer 108 
of the generic type in which it is desired for security reasons also has a control line 114 through which it is connected to 
to ensure that not all of the components of the data process- 65 the ROM 102. Finally, provision is also made for a RESET 
ing circuit can communicate with one another. It is then line 115 to the multiplexer 108, through which the multi- 
possible, through the use of a suitable configuration of the plexer 108 can be reset to an initial state in the event of a 
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reset of the data processing circuit. An output of the multi- 
plexer 108 is connected through a control line 116 to the 
encoding module 107, so that the encoding module 107 is 
supplied with a new key in response to an output signal of 
the multiplexer 108. According to the invention, it is also 5 
provided that the encoding method used in the encoding 
module 107 is switched over in the encoding module 107 in 
response to an output signal of the multiplexer 108 over the 
control line 116. 

During operation, the electronic data processing circuit 10 
according to the invention behaves as follows: When the 
program is started (RESET), a start key is set in the 
multiplexer in response to a signal on the RESET line 115. 

Thereupon, the data traffic between the data bus 106 and 
the CPU 101 is encoded or decoded in the encoding module 15 
107. A corresponding operation is executed in accordance 
with the data flow direction upon each passage of data 
through the encoding module 107 and with each execution 
of a command "Clr C", the ROM 102 transmits a control 
pulse to the multiplexer 108 over the control line 114. 20 
Thereupon, the multiplexer 108 retrieves one of three keys 
KEY 3, KEY 2, KEY 1 from the FLASH memory 104 over 
the data line 109, and transmits it to the encoding module 
107. Thereafter, either the key used in the encoding module 
107 is exchanged or, depending on the significance of the 25 
signal present on the control line 116, there is a changeover 
from an encoding method used in the encoding module 107. 
If a specific operating time of the data processing circuit is 
exceeded without the multiplexer 108 being activated by the 
ROM 102, the timer 111 moves into action. The actuation of 30 
the timer 111 transmits a random number from the random 
number generator 113 to the multiplexer 108 over the data 
line 110. The multiplexer 108 then transmits the random 
number to the encoding module 107. 

35 

The data in the data memories 102, 103, 104 and 105 are 
stored in an encoded manner. Consequently, the data on the 
data bus 106 are transported in an encoded manner to the 
CPU 101, where they are decoded again by the encoding 
module 107. It is only thereafter that the data are ready 
decoded for processing in the CPU. 40 

FIG. 2 shows a variant of the data processing circuit of 
FIG. 1, which likewise has a CPU 101 as an operating 
module as well as a plurality of data memories. In detail, 
these data memories are a ROM 102, an EEPROM 103, a 45 
FLASH memory 104 and a RAM 105. The data memories 
102, 103, 104, 105 and the CPU 101 are connected to one 
another through a data bus 106. 

An encoding module 107 which is provided in the CPU 
101 encodes or decodes data traffic between the CPU 101 50 
and the data memories 102, 103, 104 and 105. 

In contrast with the embodiment of FIG. 1, the data 
processing circuit in FIG. 2 has no multiplexer for supplying 
the encoding module 107 with a new key. Instead, the data 
processing circuit of FIG. 2 is connected through a control 55 
line 122 to a conversion module 120, which is in turn 
connected to an address bus 121 of the CPU 101. Leading 
to the conversion module 120 is a further control line 123 
through the use of which a specific conversion can be 
selected from a selection of different conversions from eo 
"address" to "key", that are stored in the conversion module 
120. A key is thereby derived from an address present in the 
CPU 101 by the conversion module 120. 

During operation, the electronic data processing circuit of 
FIG. 2 behaves essentially like that in FIG. 1. When the 65 
program is started (RESET), a start key is set in the encoding 
module 107 in response to a signal on the control line 123. 
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Thereafter, each instance of data traffic between the data bus 
106 and the CPU 101 is encoded or decoded in the encoding 
module 107. A corresponding operation is executed in 
accordance with the data flow direction upon each passage 
of data through the encoding module 107. With each acti- 
vation of the control line 123, the conversion module 120 
derives a key from an address present in the CPU 101 on the 
basis of a new conversion. 

The data in the data memories 102, 103, 104 and 105 are 
always stored in an encoded manner. Consequently, the data 
on the data bus 106 are transported in an encoded manner to 
the CPU 101, where they are decoded again by the encoding 
module 107. It is only thereafter that the data are ready 
decoded for processing in the CPU. 

The data processing circuit according to the invention 
which is shown in FIG. 3 has a CPU 1 as an operating 
module and a plurality of data memories. In detail, these data 
memories are a ROM 2, an EEPROM 3, a FLASH memory 
4 and a RAM 5. The data memories 2, 3, 4, 5 and the CPU 
1 are connected to one another through a data bus (which is 
not shown in this view). Instead of the data bus, the CPU 1 
exchanges data with the data memories 2, 3, 4, 5 through 
individual data lines 6, 7, 8, 9, 10, 11, 12, 13, 14 and 15 
which are provided in this embodiment. A latch buffer 16, 
17, 18, 19 is furthermore disposed between the CPU 1 and 
each of the ROM 2, the EEPROM 3, the FLASH 4 and the 
RAM 5, respectively. 

Encoding modules 20, 21, 22 and 35, which encode or 
decode the data traffic on the data lines assigned to them, are 
provided in the region between the ROM 2 and the latch 16, 
in the region between the latch 17 and the CPU 1, in the 
region between the latches 18, 19 and the CPU 1 as well as 
in the CPU 1 itself. It may be mentioned in this case once 
again that the devices of this type are referred to below as 
"encoding modules", although they are expressly not limited 
to devices which only execute encoding. In accordance with 
the basic concept of the invention, this designation also 
covers devices which execute both encoding and decoding 
or only one of these two operations. The encoding or 
decoding can be performed in this case by a suitable delay, 
by interchanging individual bit lines of the data lines, or by 
altering the significance of individual data bits. It is also 
possible to execute software encoding. 

The encoding modules 20, 21, 22 and 35 are constructed 
in such a way that the data traffic on the data lines assigned 
to them is respectively encoded or decoded only partially. A 
complete encoding or decoding results only upon coopera- 
tion of a respective one of the encoding modules 20, 21, 22 
with the encoding module 35. 

Furthermore, the data processing circuit according to the 
invention has a multiplexer 23, which is connected to the 
FLASH memory 4 through a data line 24. The multiplexer 
23 is connected through a data line 25 to a timer 26, which 
can be fed a random number by a random number generator 
28 over a data line 27. The multiplexer 23 also has a control 
line 29, through which it is connected to the ROM 2. 

An output of the multiplexer 23 is connected through 
control lines 30, 31, 32, 33, 34 to the encoding modules 20, 
21, 22, 35. The encoding modules 20, 21, 22, 35 are supplied 
with a new key in response to an output signal of the 
multiplexer 23. 

During operation, the electronic data processing circuit 
according to the invention behaves as follows: With each 
execution of- a command "Clr C", the ROM 2 transmits a 
control pulse to the multiplexer 23 over the control line 29. 
Thereupon, the multiplexer 23 retrieves one of three keys 
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KEY 3, KEY 2, KEY 1 from the FLASH memory 4 over the 2. The electronic data processing circuit according to 

data line 24, arid transmits it to the encoding modules 20, 21, claim 1, including different locations at which said encoding 

22 and 35. If a predetermined operating time of the data modules are disposed. 

processing circuit is exceeded without the multiplexer 23 , -™ j * * • j. 

being activated by the ROM 2, the timer 26 moves into 5 , 3 ' ^ctronicdata processing circmt according to 

action. The actuation of the timer 26 transmits a random clai u m wher f. in said encodin g m ^ules encode data traffic 

number from the random number generator 28 to the mul- ™ ih an e n cod "ig algonthm. 

tiplexer 23 over the data line 25. The multiplexer 23 then 4 The electronic data processing circuit according to 

transmits the random number to the encoding modules 20, claim 1, wherein said encoding modules encode data traffic 

21, 22, 35. by hardware encoding. 

The data in the ROM 2 are stored in an encoded manner, 5. The electronic data processing circuit according to 

and they are only partially decoded by the encoding device claim 1, wherein said encoding modules selectively change 

20 during readout in the latch 16. Consequently, the data t lie significance of individual bits of data traffic 

from the ROM 2 are transported on a data line 8 while still 6 ^ electronic data p rocess i ng circuit according to 

partially encoded as far as the CPU 1, where they are . ■ - „ . • • . a , , , . , 

i ; i j j • j i « i* • i is claim 5, wherein said encoding modules have at least one 

completely decoded by the encodmg module 35. It is only EXOR It 

thereafter that the data are ready decoded for processing in , ' . 

the CPU 1. '* Tne electroruc data processing circuit according to 

The data which are provided in an encoded manner in the claim lj wherein said encoding modules selectively change 

EEPROM 3 are transmitted encoded over a data line 9 to the a connecting sequence of said at least one data line, 

latch 17, and relayed from there to the encoding module 21, 20 8. The electronic data processing circuit according to 

where they are partially decoded. From there, the still claim 1, wherein said encoding modules at least partially 

partially encoded data pass through a data line 11 to the CPU selectively delay data traffic. 

1, where they are completely decoded by the encoding 9. The electronic data processing circuit according to 

module 35 and are thereafter available for processing. claim 1? wner ein said encoding modules have at least one 

Data for the FLASH memory 4 and for the RAM 5 are 25 input for i nput ting at least one key. 

initially respectively encoded partially by the encoding 10 electronic data processing circuit according to 

module 35 and the encoding module 22, before they are claim 9> mc i u di ng a flash cell for storing said at least one 

stored completely encoded in the FLASH memory 4 or in ^ 

the RAM 5. For this purpose the data which «* partially u ^ electronic data passing circuit according to 

encoded in the encoding module 35 of the CPU 1 are 30 ^ ^ d moduk for accommodating 

transmitted over the data line 11 to the encoding module 22, A , , t . . .7 . x 4 , j , , . 

, t , , 4 , j , , r . 0 « j j the data processing circuit, said integrated module having a 

where they are completely encoded before they are handed . . , ..11 , 

over through respective data lines 13 and 14 to the latches bur^d structure tor storing said at least one key. 

18, 19 respectively assigned to the FLASH memory 4 and 12 ^ eIectronic data processing circuit according to 

the RAM 5. The encoded data pass from the latches 18, 19 35 claim 9, including a sensor for sampling manipulations of a 

to the respective FLASH memory 4 or RAM 5 over data location at which said at least one key is stored, 

lines 12 15. 13. The electronic data processing circuit according to 

When the data are read out of the FLASH memory 4 and claim 9 > wherein said at least one key can be input into said 

of the RAM 5, they are initially respectively decoded encoding modules during execution of predetermined opera- 

partially by the encodmg module 22 and by the encoding 40 tions b Y said operating module. 

module 35 before they are available for processing com- 14. The electronic data processing circuit according to 

pletely decoded in the CPU 1. claim 9, including a random number generator for randomly 

I claim: selecting said at least one key. 

1. An electronic data processing circuit, comprising: 15. The electronic data processing circuit according to 
an operating module; 45 claim 9, including a device for deriving said at least one key 
at least one data memory; from an address used in said operating module, 
a data bus having at least one data line connected between 16. The electronic data processing circuit according to 
said at least one data memory and said operating claim 9, including a time-measuring device for initiating a 
module; and change of said at least one key. 
at least two encoding modules disposed in the vicinity of 17. The electronic data processing circuit according to 
said at least one data line, said encoding modules claim 1, wherein said operating module is a microprocessor, 
cooperating to provide a complete encoding or decod- 
ing. * * * * * * 



